CVE-2005-2285

Mô tả

Tham khảo

• kb.cert.org/vuls/id/165290 · Patch
• kb.cert.org/vuls/id/JGEI-6BWPXL

Lỗ hổng khác của webeoc

• CVE-2005-4029TRUNG BÌNH 5.0WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful…
• CVE-2005-4002TRUNG BÌNH 4.0WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC inst…
• CVE-2005-2286NGHIÊM TRỌNG 10.0WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a r…
• CVE-2005-2284CAO 7.5Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements via unknown attack vectors.
• CVE-2005-2283THẤP 2.1WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of se…